GO-2025-3607
gorilla/csrf CSRF vulnerability due to broken Referer validation in github.com/gorilla/csrf
At a glance
- Published
- Updated
- CVE
- CVE-2025-24358
- Aliases
- GHSA-rq77-p4h8-4crw
Description
gorilla/csrf CSRF vulnerability due to broken Referer validation in github.com/gorilla/csrf
Affected packages
| Package | Versions |
|---|---|
| Go · github.com/gorilla/csrf | introduced 0, fixed 1.7.3 |
References
- https://github.com/gorilla/csrf/security/advisories/GHSA-rq77-p4h8-4crw ADVISORY
- https://nvd.nist.gov/vuln/detail/CVE-2025-24358 ADVISORY
- https://github.com/gorilla/csrf/commit/9dd6af1f6d30fc79fb0d972394deebdabad6b5eb FIX
Sources
| Source | Licence |
|---|---|
| OSV.dev | CC-BY 4.0 — Go Vulnerability Database |